This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json) Hash identifier: MEHgRxxS79eY9Bg+CAAEasM01aTVj9Wx4QxTd1IjRD0= Subject key identifier: 41:FC:67:CC:58:DA:A3:E6:02:15:19:4A:99:25:F7:34:E7:58:A5:76 Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Certificate serial: 019B2AAE88A0D819386D5B2C942C79CE2BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft Manifest number: 173D Signing time: Wed 17 Dec 2025 05:00:39 +0000 Manifest this update: Wed 17 Dec 2025 05:00:39 +0000 Manifest next update: Thu 18 Dec 2025 05:00:39 +0000 Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: HkojWinn2+9I3VgYEWOuB2LTn919AurKpesyJ+XeZLA=) 2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:88:a0:d8:19:38:6d:5b:2c:94:2c:79:ce:2b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Validity Not Before: Dec 17 05:00:39 2025 GMT Not After : Dec 18 05:00:39 2025 GMT Subject: CN=41fc67cc58daa3e60215194a9925f734e758a576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:1e:aa:83:5f:2a:40:78:97:b9:38:c6:2d: 21:e9:3a:c2:da:12:79:cf:d1:9f:c1:08:d2:85:39: d8:fe:f2:55:42:13:27:8b:74:69:14:f9:85:b3:66: 90:53:5f:ad:2a:a5:07:22:af:18:84:41:9b:f2:67: 53:05:57:3b:eb:ab:a4:10:e2:d7:15:ce:98:8b:ba: a0:4f:44:93:d8:e7:a2:d7:19:73:14:3b:43:8e:11: f7:06:f3:a1:7f:3b:10:b0:09:28:1b:db:62:8c:09: 4b:f2:b6:c8:44:01:b0:e2:97:3d:93:59:5c:2b:25: bf:d3:3b:2a:0e:94:47:1b:5e:81:ff:f9:4f:c9:ee: 54:4b:5b:f8:01:f0:62:49:0c:d4:80:e9:57:37:c4: 12:ff:6c:21:ee:8e:13:03:cd:06:d4:46:2d:b3:79: f3:a8:e0:44:4b:b7:70:f0:4d:60:de:70:7e:0c:37: 84:03:4c:4c:8a:fa:df:53:ef:ca:42:69:33:32:c2: cc:58:94:c2:41:ef:13:a7:7c:2f:7d:eb:a2:30:56: b5:e3:5d:03:cf:33:a2:6d:17:d8:a0:38:85:5f:78: c6:92:a8:da:54:5d:e0:aa:42:c6:9f:14:b4:81:25: 33:80:09:ed:b0:36:4c:fd:5b:a2:67:27:96:bf:12: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:67:CC:58:DA:A3:E6:02:15:19:4A:99:25:F7:34:E7:58:A5:76 X509v3 Authority Key Identifier: keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bb:9f:71:8a:3d:68:20:7b:c5:30:83:22:3b:bd:89:8c:f1: 17:fc:31:a0:e1:9e:8b:48:39:2d:30:b4:78:ea:6b:d3:da:76: 45:27:4e:3e:61:41:55:bb:31:e2:c1:83:d1:85:5e:4c:a7:72: 10:b8:fa:20:a3:e7:6a:c7:a6:d6:83:fb:e4:2a:c4:e1:53:60: 0c:2a:d2:d4:e7:ab:e0:23:30:40:34:64:a0:f6:ce:e7:82:f6: 19:e7:2b:77:73:e6:d1:4f:ec:42:af:ec:63:cb:55:dc:71:4f: 0d:5f:3a:07:ef:6c:82:d2:7d:f6:eb:46:33:cb:aa:7a:e5:43: ed:f5:29:49:80:e5:22:6d:95:71:5d:de:bf:02:9c:62:53:6a: e3:82:de:f1:a1:d4:64:6c:34:95:fe:d7:99:9b:6b:e4:45:45: 4e:2a:92:7a:0a:a0:e1:01:d1:41:4f:fc:36:45:97:50:05:f4: 9a:fe:de:fa:62:e3:fc:63:9b:18:0e:4e:a8:1f:d8:56:22:35: 00:e8:33:4e:71:43:85:dd:e1:1c:c0:f6:89:35:89:2c:10:14: 3b:ba:c7:67:c6:b0:07:e1:96:a1:fc:15:9a:23:29:ca:b6:32: 92:79:b3:de:ea:09:d4:b8:54:22:73:e7:ad:3c:73:9f:d5:55: dc:7c:94:bb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsqroig2Bk4bVsslCx5zivLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj YWVkNGIwHhcNMjUxMjE3MDUwMDM5WhcNMjUxMjE4MDUwMDM5WjAzMTEwLwYDVQQD Eyg0MWZjNjdjYzU4ZGFhM2U2MDIxNTE5NGE5OTI1ZjczNGU3NThhNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSgeqoNfKkB4l7k4xi0h6TrC2hJ5 z9GfwQjShTnY/vJVQhMni3RpFPmFs2aQU1+tKqUHIq8YhEGb8mdTBVc766ukEOLX Fc6Yi7qgT0ST2Oei1xlzFDtDjhH3BvOhfzsQsAkoG9tijAlL8rbIRAGw4pc9k1lc KyW/0zsqDpRHG16B//lPye5US1v4AfBiSQzUgOlXN8QS/2wh7o4TA80G1EYts3nz qOBES7dw8E1g3nB+DDeEA0xMivrfU+/KQmkzMsLMWJTCQe8Tp3wvfeuiMFa1410D zzOibRfYoDiFX3jGkqjaVF3gqkLGnxS0gSUzgAntsDZM/VuiZyeWvxLUfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEH8Z8xY2qPmAhUZSpkl9zTnWKV2MB8GA1UdIwQY MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3 YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbuf cYo9aCB7xTCDIju9iYzxF/wxoOGei0g5LTC0eOpr09p2RSdOPmFBVbsx4sGD0YVe TKdyELj6IKPnasem1oP75CrE4VNgDCrS1Oer4CMwQDRkoPbO54L2Gecrd3Pm0U/s Qq/sY8tV3HFPDV86B+9sgtJ99utGM8uqeuVD7fUpSYDlIm2VcV3evwKcYlNq44Le 8aHUZGw0lf7XmZtr5EVFTiqSegqg4QHRQU/8NkWXUAX0mv7e+mLj/GObGA5OqB/Y ViI1AOgzTnFDhd3hHMD2iTWJLBAUO7rHZ8awB+GWofwVmiMpyrYyknmz3uoJ1LhU InPnrTxzn9VV3HyUuw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:17 2025 by rpki-client